rasqlinsert

Carter Bullard carter at qosient.com
Sat Mar 15 15:50:59 EDT 2014


Hey Dave,
I’ll have it up on Monday (or possibly late Sun) !!!
Carter

On Mar 15, 2014, at 2:38 PM, David Edelman <dedelman at iname.com> wrote:

> Carter,
>  
> Is the change to rasqlinsert mentioned below on the site?
>  
> --Dave
>  
> From: argus-info-bounces+dedelman=iname.com at lists.andrew.cmu.edu [mailto:argus-info-bounces+dedelman=iname.com at lists.andrew.cmu.edu] On Behalf Of Carter Bullard
> Sent: Thursday, March 13, 2014 12:02 PM
> To: CS Lee
> Cc: Argus
> Subject: Re: [ARGUS] rasqlinsert
>  
> Hey CS Lee,
> Use “-D3” to get rasqlinsert() to print the actual sql
> statement that its using.  That should give you the string
> to try directly in the mysql interpreter to see what is
> wrong.  Maybe very obvious.
>  
> Not seeing your specific problem here, although, now that
> I’m testing, I do see a problem with 20 and 21 not flushing
> all the data into the database.  I’ll fix that now…if you can
> send the format of the sql statement that is failing,
> should be able to get that solved...
>  
> Carter
>  
> On Mar 13, 2014, at 5:01 AM, CS Lee <geek00l at gmail.com> wrote:
> 
> 
> hi Carter,
> 
> I'm trying to run rasqlinsert from the argus client version 3.0.7.21 -
> 
> argusc-3.0.7.21/bin/rasqlinsert -M drop -nr /argus_data/data.arg3 -m none -wmysql://root@localhost/argusdb/tbl_argus_test -s srcid saddr sport daddr dport proto
> rasqlinsert[18078]: 15:27:17.155818 mysql_real_query error You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '(null)' at line 1
> 
> I don't seem to have this problem when I use 3.0.7.3 though. My mysql version is 
> mysql --version
> mysql  Ver 14.14 Distrib 5.5.24, for debian-linux-gnu (x86_64) using readline 6.2
> 
> 
> -- 
> Best Regards,
> 
> CS Lee<geek00L[at]gmail.com>
> 
> http://geek00l.blogspot.com
> http://defcraft.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20140315/d93fbf94/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6837 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20140315/d93fbf94/attachment.bin>


More information about the argus mailing list